Privacy Policy
Effective: March 23, 2026
This Privacy Policy describes how Dictiva ("we," "us," or "our") collects, uses, and protects your information when you use our governance platform at app.dictiva.com.
1. Information We Collect
We collect information you provide directly: your name, email address, organization name, and governance content you create (statements, assemblies, glossary terms). We also collect usage data automatically, including IP addresses, browser type, pages visited, and feature usage patterns.
2. Cookies & Tracking
We use essential cookies for authentication and session management. We use Google Analytics 4 (GA4) for anonymized usage analytics and Sentry for error monitoring and performance tracking. You can disable non-essential cookies through your browser settings.
3. Payment Processing
Payments are processed securely by Stripe. We never store your credit card numbers, bank account details, or other payment credentials on our servers. Stripe's privacy policy governs the handling of your payment information.
4. Data Retention
We retain your account data for as long as your account is active. Governance content (statements, assemblies, glossary terms) is retained until you delete it. Upon account deletion, we remove your personal data within 30 days, though anonymized analytics data may be retained.
5. GDPR Rights (European Users)
If you are in the European Economic Area, you have the right to: access your personal data, rectify inaccurate data, request erasure, restrict processing, data portability, and object to processing. To exercise these rights, contact us at privacy@dictiva.com.
6. CCPA Rights (California Users)
California residents have the right to: know what personal information is collected, request deletion of personal information, opt out of the sale of personal information (we do not sell personal information), and non-discrimination for exercising these rights. Contact privacy@dictiva.com to exercise these rights.
7. Third-Party Services
We use the following third-party services: Stripe for payment processing, Google Analytics 4 for usage analytics, Sentry for error monitoring, Cloudflare for DNS and content delivery, Typesense for search functionality, and Anthropic for AI-powered features. Each service has its own privacy policy governing data handling.
8. Children's Privacy
Dictiva is not intended for children under 16. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child under 16, we will take steps to delete it promptly.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the effective date. Your continued use of Dictiva after changes constitutes acceptance of the updated policy.
10. Contact Us
For privacy-related inquiries, contact us at privacy@dictiva.com. For general support, reach us at hello@dictiva.com.